Supabase Agent Skills

What it is

Supabase Agent Skills is Supabase’s own pack of two skills for AI coding agents. The first, supabase, covers any Supabase task: Database, Auth, Edge Functions, Realtime, Storage, the client libraries, the CLI and the MCP server. The second, supabase-postgres-best-practices, is a set of Postgres rules in eight groups, from query speed to row level security. Your agent loads each one when your task matches its description, so you do not need to call them by name.

1. You install the pack once with one npx command
2. You ask for Supabase or Postgres work as usual
3. Your agent loads the skill that fits the task
4. The skill points it to current docs or a Postgres rule
5. Your agent writes the change and tests it with a query

Who it suits

Developers who build on Supabase with an AI coding agent, and anyone whose agent writes SQL for Postgres. The postgres skill says it is for Postgres running anywhere, so it also fits a database that is not on Supabase. Both skills are Markdown files with no script inside.

Where to use it

Any agent the skills CLI supports. The README names Claude Code, GitHub Copilot, Cursor and Cline among the 18 or more it works with.

• Claude Code: through the skills CLI, or as two plugins from one marketplace
• Cursor, GitHub Copilot, Cline and other agents: through the same skills CLI command
• Your project, or all your projects: project scope is the default, and --global widens it

How to set it up

Get it saves a zip of Mindket’s setup notes in your downloads folder, with both routes from Supabase’s README and its page on agent skills.

1. Run the install line in a terminal. It adds both skills to the project you are in. Add --global to install for all your projects instead.
2. Open your agent in that project. The README says the skills are available once installed.
3. Ask for Supabase or Postgres work. Your agent picks the skill that fits.

npx skills add supabase/agent-skills

To install only one of the two, name it. Each line below adds one skill.

npx skills add supabase/agent-skills --skill supabase
npx skills add supabase/agent-skills --skill supabase-postgres-best-practices

Claude Code can also take them as plugins. Run these three in a terminal, not inside a session. The marketplace is registered as supabase-agent-skills, so each install reads the plugin’s name, @ and that name. Plugin skills carry the plugin’s name, so a command then reads /supabase:supabase.

claude plugin marketplace add supabase/agent-skills
claude plugin install supabase@supabase-agent-skills
claude plugin install postgres-best-practices@supabase-agent-skills

How to use it

Ask your agent for the work in plain words, as in the README’s examples “Optimize this Postgres query” and “Help me set up Supabase Auth with Next.js”. The table shows what each skill tells your agent once it loads.

Example

A page that lists one customer’s orders has gone slow, and you suspect the table has no index on its customer column.

Help me add proper indexes to this table

Your agent loads the Postgres skill, finds its rule that Postgres does not index foreign key columns by itself, and proposes an index on that column.

The rule file shows the fix as a create index line on the foreign key column, and your agent adapts it to your table’s name.

For newcomers and experts

If you are new. A skill is a folder with a SKILL.md file that your agent reads when your task matches its description. Install the pack, then ask as you would anyway. The supabase skill tells your agent not to trust its memory of Supabase, since the products change often, so it reads the changelog first.

For experts. The supabase skill carries a security checklist for your agent. Four of its traps: user_metadata never decides authorization, and the service_role or secret key never goes into a public client. On Postgres 15 and later, views use security_invoker. An UPDATE policy gets both USING and WITH CHECK.

Its CLI notes name two version gates. supabase db query needs CLI v2.79.0 or later, and supabase db advisors needs v2.81.3 or later. With an older CLI your agent falls back to the MCP tools execute_sql and get_advisors. In a project without declarative schemas, it says to iterate on schema changes with execute_sql or supabase db query, and not to use apply_migration on a local database.

Good to know

Supabase makes the pack and says it updates it often.

• Updates: Supabase’s page on agent skills gives npx skills update, which updates every skill you have installed
• Tokens: the supabase skill tells your agent to prefer a scoped personal access token for the CLI, the MCP server and CI. The browser login makes a classic token with full account access
• Docs lookups: the supabase skill has your agent use the MCP search_docs tool first, then any docs page fetched as Markdown by adding .md to its address
• Feedback: if you say the skill gave wrong guidance, your agent asks your permission before it opens a GitHub issue on Supabase’s repository
• Both routes: Claude Code’s skills page says a plugin skill and a copy in a skills folder both load, so each skill would show twice. Pick one route
• Maker: Supabase, MIT licensed. Mindket lists the pack and is not Supabase